Назад
Company hidden
14 дней назад

Summer 2027 Internship - Information Security Engineer (Cybersecurity)

32 - 46$
Формат работы
onsite
Тип работы
fulltime
Грейд
trainee
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Summer 2027 Internship - Information Security Engineer (Cybersecurity): Attacking and hardening web applications, APIs, hosts, cloud infrastructure, embedded devices, and industrial controllers with an accent on penetration testing, code auditing, reverse engineering, and adversarial design reviews. Focus on building proof-of-concept exploits, analyzing firmware and binaries, identifying vulnerabilities across software and OT systems, and developing automated security tooling.

Location: On-site in Los Angeles, CA, full-time for the entire internship

Hourly pay: $32–$46 per hour, depending on the candidate's current standing in school. Monthly housing stipend and overtime pay are available.

Company

hirify.global develops software, firmware, control systems, infrastructure, and industrial technology for low-cost nuclear fuel enrichment in the United States.

What you will do

  • Conduct penetration tests against networks, services, web applications, APIs, cloud environments, hosts, and identity infrastructure.
  • Audit source code and product features for vulnerabilities and create proof-of-concept exploits, static-analysis rules, and CI security checks.
  • Reverse engineer embedded devices and industrial equipment, including firmware, x86 and ARM binaries, debug interfaces, PLCs, and industrial protocols.
  • Perform threat modeling and adversarial design reviews with software, controls, and hardware engineers.
  • Assess third-party software, devices, and services and collaborate with vendors to resolve security issues.
  • Build automated tooling for detecting security exposures and present findings and fixes to system owners and technical leaders.

Requirements

  • Currently pursuing a Bachelor's, Master's, or PhD in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or a related field.
  • Security experience with one or more of C, C++, Rust, Go, Python, x86, ARM, cryptography, reverse engineering, embedded systems, or network protocols.
  • Understanding of vulnerability classes including SQL injection, XSS, CSRF, SSRF, memory corruption, and authentication or authorization flaws.
  • Experience auditing code and features, reading large codebases, and investigating failures beyond obvious attack paths.
  • Clear written communication and the ability to explain findings so system owners can fix them.
  • Must be willing and able to work on-site in Los Angeles, CA, 40 hours per week, for the whole internship.

Nice to have

  • Offensive security experience through CTFs, bug bounties, CVEs, security research, or homelab projects.
  • Experience with fuzzing, static analysis, sandboxing, exploit mitigations, or tools such as Burp Suite, Ghidra, IDA, Binary Ninja, Wireshark, and Metasploit.
  • Hardware hacking experience involving firmware dumps, UART, JTAG, SWD, logic analyzers, or fault injection.
  • Experience with industrial control systems, PLCs, SCADA, OT protocols, Windows and Active Directory, Linux, cloud platforms, containers, or Kubernetes.
  • A GitHub profile, technical blog, CTF write-up, CVE, or bug bounty profile demonstrating security research.

Culture & Benefits

  • Mission-driven work focused on nuclear energy and industrial technology.
  • Culture emphasizing urgency, accountability, transparency, and first-principles problem solving.
  • Real security projects with testing limited to company-owned systems and approved rules of engagement.
  • Extended hours may be required; interns are eligible for overtime pay.
  • Monthly housing stipend for interns.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →